feat(key-provider): add in-tree local provider

Author: kvinwang

.gitignore

@@ -1,4 +1,5 @@
 /dstack/target
+/dstack/local-key-provider/build/target
 /certs
 /build-config.sh
 /build/*

REUSE.toml

@@ -59,7 +59,7 @@ SPDX-License-Identifier = "Apache-2.0"
 path = [
     "dstack/gateway/templates/wg.conf",
     "dstack/guest-agent/templates/metrics.tpl",
-    "dstack/key-provider-build/sgx_default_qcnl.conf",
+    "dstack/local-key-provider/build/sgx_default_qcnl.conf",
 ]
 SPDX-FileCopyrightText = "Copyright (c) 2024-2025 The Project Contributors"
 SPDX-License-Identifier = "Apache-2.0"

docs/onboarding.md

@@ -93,10 +93,10 @@ sudo dstackup install
 
 `dstackup install` auto-detects TDX or AMD SEV-SNP. If no local guest image exists, it downloads the latest unified image from [dstack guest-OS releases](https://github.com/Dstack-TEE/dstack/releases?q=guest-os-v), requires the release SHA-256 digest by default, verifies the tarball, stages the unpack, and only then adopts the image. Current images include NVIDIA support conditionally and work on CPU-only hosts too. Pinned versions below 0.6.0 are read directly from the archived [`meta-dstack` releases](https://github.com/Dstack-TEE/meta-dstack/releases); versions 0.6.0 and later come from this repository.
 
-On TDX, `dstackup install` starts the SGX key provider automatically from `/usr/local/share/dstack/key-provider-build`. To use a different provider, pass one of:
+On TDX, `dstackup install` starts the SGX key provider automatically from `/usr/local/share/dstack/local-key-provider/build`. To use a different provider, pass one of:
 
 ```bash
-sudo dstackup install --key-provider-src /path/to/key-provider-build
+sudo dstackup install --key-provider-src /path/to/local-key-provider/build
 sudo dstackup install --use-existing-key-provider 127.0.0.1:3443
 ```
 
@@ -281,7 +281,7 @@ TDX uses an SGX-backed key provider for KMS sealing. `dstackup install` uses the
 
 ```bash
 sudo dstackup install --use-existing-key-provider 127.0.0.1:3443
-sudo dstackup install --key-provider-src /path/to/key-provider-build
+sudo dstackup install --key-provider-src /path/to/local-key-provider/build
 ```
 
 AMD SEV-SNP does not use this key provider.

docs/tutorials/README.md

@@ -23,12 +23,12 @@ running your first confidential application.
 | 2 | SSL Certificate Setup | [ssl-certificate-setup.md](ssl-certificate-setup.md) |
 | 3 | Docker Setup | [docker-setup.md](docker-setup.md) |
 | 3 | HAProxy Setup | [haproxy-setup.md](haproxy-setup.md) |
-| 4 | Gramine Key Provider | [gramine-key-provider.md](gramine-key-provider.md) |
+| 4 | Local Key Provider | [gramine-key-provider.md](gramine-key-provider.md) |
 | 4 | Local Docker Registry | [local-docker-registry.md](local-docker-registry.md) |
 | 5 | Blockchain Wallet Setup | [blockchain-setup.md](blockchain-setup.md) |
 
 > Steps 3–4 contain parallel tracks. Docker Setup and HAProxy Setup are
-> both step 3; Gramine Key Provider and Local Docker Registry are both
+> both step 3; Local Key Provider and Local Docker Registry are both
 > step 4. Complete both within each step number.
 
 ### 3. dstack Installation

docs/tutorials/clone-build-dstack-vmm.md

@@ -56,7 +56,7 @@ All build commands should be run as the `ubuntu` user. Only the final installati
 ### Step 2: Verify dstack Repository
 
 The dstack repository should already be cloned and checked out on the current
-`master` branch from [Gramine Key Provider](/tutorial/gramine-key-provider):
+`master` branch from [Local Key Provider](/tutorial/gramine-key-provider):
 
 ```bash
 cd ~/dstack

docs/tutorials/docker-setup.md

@@ -17,7 +17,7 @@ estimatedTime: "10 minutes"
 
 # Docker Setup
 
-This tutorial guides you through installing Docker Engine on your TDX server. Docker is required for the Gramine Key Provider and Local Docker Registry.
+This tutorial guides you through installing Docker Engine on your TDX server. Docker is required for the Local Key Provider and Local Docker Registry.
 
 ## What You'll Install
 
@@ -148,7 +148,7 @@ For detailed solutions, see the [Prerequisites Troubleshooting Guide](/tutorial/
 
 With Docker installed, proceed to:
 
-- [Gramine Key Provider](/tutorial/gramine-key-provider) - Deploy SGX-based key provider
+- [Local Key Provider](/tutorial/gramine-key-provider) - Deploy SGX-based key provider
 
 ## Additional Resources